The Puneet Online

This notice is meant to be readable on its own. Short version: I keep enough personal data to run the site, reply when someone writes, send a newsletter if you ask for it, and — only if you agree — measure what people use. Not a secret profile of your entire life.

Who is responsible

The Data Fiduciary for this website is Puneet Naliath, an individual. I am also the person who answers questions about this processing and handles grievances. Write to puneetcollabs@gmail.com. I do not have a Data Protection Officer.

Contact form

If you send a message, I process the name, email address and message you type, plus the time it arrived. The notification email may also include basic request context from your browser: device type, browser, operating system, preferred language and the referring page. That is so I can read the message and reply. Approximate city, region or country derived from your IP address is not collected for this form. Exact GPS location and raw IP addresses are not stored by this contact-form workflow.

The form will not send unless you tick the consent box. That consent is only for handling the enquiry. It is not consent for the newsletter or for optional analytics.

If you join the newsletter, I process the email address you submit so MailerLite can add you to the list and send occasional updates. That is a separate opt-in. Unticking or never ticking that box means your email is not sent to MailerLite from this site.

Optional site usage

If you allow tracking, the site records basic journey events such as page views and content clicks. The custom analytics layer uses a random session identifier stored in your browser session, along with the page path, referrer when available, and a content identifier when you click a tracked card. Vercel Analytics and Speed Insights then measure aggregate usage and performance.

None of that optional tracking runs until you choose “Allow tracking”. You can change that choice from the Tracking control in the footer, or from the banner that appears until you decide. Declining it does not stop the rest of the site from working.

What is needed to run the site

Hosting the website involves ordinary technical processing by Vercel (for example security, delivery and server logs). Private admin pages use a signed admin session cookie. That cookie is only for the private admin session and is not public-site journey tracking.

Processors

These organisations process personal data on my behalf for the purposes above:

Vercel, Inc. — hosting, content delivery, and, if you agree, Vercel Analytics and Speed Insights.
Neon — Postgres database for contact submissions and, if you agree, journey events.
Resend — sending me the email notification when you use the contact form.
MailerLite — newsletter subscription and delivery, only if you opt in.

Some of that processing may happen outside India. I use these processors only for the purposes described here.

Your rights

Under the Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025, you can ask me to:

Access the personal data I hold about you, and a summary of how it is processed.
Correct incomplete, misleading or outdated personal data.
Erase personal data that I no longer need for the purpose you agreed to, unless the law requires me to keep it.
Withdraw consent as easily as you gave it. For the contact form, email me and I will stop using that submission except where I must keep a record. For the newsletter, use the unsubscribe link in an email or write to me. For optional tracking, use the Tracking control in the footer and choose “No thanks”.
Nominate one or more people to exercise these rights on your behalf if you die or cannot act. Email me the nominee’s name and how I should recognise the request.
Raise a grievance about this processing by emailing puneetcollabs@gmail.com. I will respond within 90 days.
Complain to the Data Protection Board of India if you are not satisfied with my response, or if you want the Board to look at it directly.

To make a request, email puneetcollabs@gmail.com from the address you used, and say what you want (access, correction, erasure, withdrawal or nomination). I may ask for enough detail to find the right record. There is no user account on this site, so your email address is the usual identifier.

Children

This site is not directed at children under 18. I do not knowingly collect a child’s personal data. Do not use the contact form or newsletter if you are under 18. If I learn that I have a child’s personal data, I will delete it. I do not offer services that require verifiable parental consent.

If something goes wrong

If I become aware of a personal data breach, I will tell affected people without delay, in plain language, including what happened, what it may mean for them, what I am doing about it, what they can do, and how to reach me. I will also notify the Data Protection Board of India without delay, and send the Board a fuller update within 72 hours, as the DPDP Rules, 2025 require.

How long I keep it

Contact messages stay until I have dealt with them and no longer need them, or until you ask me to erase them where the law allows. Newsletter addresses stay until you unsubscribe or ask me to delete them. Optional journey events stay only while they are useful for understanding the site, or until you withdraw tracking consent and ask me to delete them. I may keep limited records where the law requires it.

External links

Some cards take you to YouTube, Instagram or other external websites. Once you leave this site, that service’s own privacy practices apply.

Questions

Use the contact page or email puneetcollabs@gmail.com if you want to ask what was submitted, withdraw consent, or request deletion.

Last updated: 24 October 2026.

What this site keeps.